Privacy Policy

This Privacy Policy (hereinafter referred to as the "Policy") defines the procedures for the collection, processing, storage, and protection of information that Synt product studio (hereinafter referred to as "Synt.", "we", "us") receives from users of syntlabs.tech (hereinafter referred to as the "Site") when submitting inquiries via the contact form, direct communication channels, or browsing the web interface.

We strictly adhere to data minimization, transparency, and high confidentiality standards. We collect and process only the information strictly necessary to establish business communication and evaluate engineering tasks.

01. Data Controller and Contact Details

The data controller is Synt product engineering studio.

For any questions regarding the processing, correction, or deletion of personal data, you may reach out directly to the designated engineer:

• Official email for legal requests: hello@synt.email
• Direct Telegram channel: @syntagency
• Domain name: syntlabs.tech

02. Scope of Collected Data

We categorize collected data into two distinct groups: information you explicitly submit to us, and baseline technical network telemetry.

2.1. Information provided directly by the user via the inquiry form:

• Name or organization: used for personal identification throughout communication.
• Contact details: Telegram handle (@username) or email address provided for correspondence.
• Project overview: high-level description of objectives, constraints, timeline, or business context submitted in the text area.

2.2. Technical telemetry processed automatically:

When accessing the Site, our infrastructure may automatically log standard technical telemetry transmitted by your browser:

• Network connection IP address;
• Browser type, version, and operating system;
• Timestamp and HTTP network status codes;
• Selected interface language locale (ua or en).

03. Purposes and Legal Basis for Data Processing

We do not use your information for unsolicited marketing, newsletters, or behavioral profiling.

Data processing is conducted strictly for the following purposes:

• Processing incoming project inquiries and preparing initial technical assessments;
• Drafting commercial proposals, architectural plans, and Statements of Work (SOW);
• Conducting pre-contractual discussions initiated by the user;
• Ensuring baseline network security, mitigating DDoS attacks, and filtering automated spam (including honeypot verification).

The legal basis for data processing is your explicit consent granted by completing and submitting the contact form on the Site (clicking the "Send Inquiry" button), as well as taking necessary steps at your request prior to entering into a contract.

04. Third-Party Subprocessors and Data Sharing

We never sell, rent, lease, or disclose your personal data to third parties for commercial or advertising purposes.

To ensure reliable Site operations and secure message dispatch, we rely on established infrastructure partners providing end-to-end encryption and compliance with international security standards:

• Cloud hosting & edge routing: Vercel Inc., Cloudflare Inc., operating on enterprise infrastructure certified under SOC 2 / ISO 27001 standards;
• Transactional messaging pipelines: email infrastructure (including Resend Inc.) and official messaging interfaces (Telegram Bot API) to deliver inquiry payloads directly to the engineer;
• Government authorities: data disclosure occurs exclusively when expressly required by applicable statutory laws, supported by a valid court order or law enforcement warrant.

05. Data Retention Periods

1. Inquiry form data is retained for the duration necessary to review the scope, conduct business correspondence, and conclude a mutual bilateral agreement.
2. If engagement is not pursued, or after project completion, communication records are removed from operational environments within a reasonable timeframe, not exceeding 12 months from the date of the last interaction, unless statutory or fiscal retention requirements dictate otherwise.
3. Web server technical access logs are automatically overwritten or purged every 30–90 days.

06. User Rights (Data Subject Control)

In compliance with international data privacy regulations (including the EU GDPR), you are entitled to the following rights:

• Right of access: request confirmation of whether your data is being processed and obtain a copy of retained records.
• Right to rectification: request correction or completion of inaccurate information.
• Right to erasure ("Right to be Forgotten"): request complete and permanent deletion of your contact records and correspondence from our systems.
• Right to withdraw consent: revoke consent to personal data processing at any time.

To exercise any of these rights, submit a concise informal notice from the email or handle provided in your original inquiry to: hello@synt.email or via Telegram: @syntagency. All requests are processed within 5 business days.

07. Cookies and Local Storage

The Site relies exclusively on essential functional and technical cookies (and LocalStorage parameters):

• Preserving your preferred UI localization language;
• Baseline anti-CSRF security tokens and request validation.

We do not employ third-party advertising pixels, cross-domain remarketing trackers (Meta Pixel, Google Ads Remarketing), or monitor your activity outside syntlabs.tech.

08. Data Security Architecture

All network connections to the Site are secured via modern TLS/HTTPS encryption protocols. Access to studio mailboxes and server interfaces is gated with two-factor authentication (2FA) and granted exclusively to the lead engineer directly managing project scoping.

09. Amendments to this Policy

We reserve the right to revise this Policy to reflect updates to Site functionality, infrastructure enhancements, or statutory legal obligations. The latest version is always accessible on this page with the effective date indicated. Continued use of the Site following modifications constitutes acceptance of the revised terms.